$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa File: 8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa (raw, json) Hash identifier: EVal1JrbivRGdVvM7qU7TblIZFn4XvjxlOASWWxGcN8= Subject key identifier: 67:8A:FF:FB:42:AA:29:2F:4E:13:12:4E:A4:02:69:63:EE:36:37:F5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797686D6A9286BDDCBAFBE8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 35.212.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:68:6d:6a:92:86:bd:dc:ba:fb:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=c11ecced-1f31-4beb-88c1-fcb45f7a73a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:cf:37:96:3f:14:21:6f:c2:c5:a0:3c:92: 49:0f:c4:da:70:ae:ef:47:d6:26:17:f4:11:0d:7d: 58:59:00:5e:9d:d1:1a:c5:b6:dd:c2:78:f1:c0:a0: c7:f8:fa:06:c0:5d:f7:af:24:25:5c:11:ca:24:55: 92:26:b2:86:79:f6:4f:3c:4a:31:1b:32:3a:fb:36: eb:c2:0f:60:19:2b:6b:81:95:44:e8:a3:a6:53:0b: 07:e2:a4:7b:9a:07:5a:3a:3a:76:a1:40:26:6b:b2: 79:e6:8f:cf:fc:9a:76:53:fe:ab:d3:16:5d:7a:97: 81:9d:55:41:1f:c2:c1:05:58:46:bb:d6:32:a3:9e: 12:a7:70:59:74:4e:48:b4:2c:43:67:bd:cf:f4:f2: 05:cb:69:45:89:47:f4:d4:5a:51:ae:14:a0:bd:a7: b4:3e:02:b4:33:95:3a:58:41:aa:97:54:fb:2d:32: 6d:54:ee:c4:7e:50:04:48:0e:53:e4:76:d5:b1:fd: 6c:7c:05:a2:a6:db:bf:21:60:4e:2d:4f:f5:a4:f3: ed:61:c1:b8:e9:b0:d0:28:77:13:ba:41:cd:63:96: f0:ef:b6:ee:75:7b:1e:6e:da:ff:4e:65:3d:41:4e: d6:db:44:96:12:9d:38:71:5b:12:5c:de:25:d3:65: 34:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8A:FF:FB:42:AA:29:2F:4E:13:12:4E:A4:02:69:63:EE:36:37:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.212.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:13:f1:7d:a0:8a:78:ff:bd:30:d7:5b:82:2f:b4:4a:a3:77: 52:4b:c7:0b:83:d2:ba:79:24:e6:1d:63:02:54:b0:40:a4:b3: fa:eb:45:ef:6d:b3:43:62:1f:ae:eb:a4:d7:5e:d0:04:59:3c: d6:c1:e1:c9:49:2e:4a:63:1b:5c:d1:60:49:a0:37:e2:86:72: 09:b6:58:c0:83:45:0e:c0:36:6d:d4:0d:ea:bc:c3:fb:e4:27: 3a:31:68:e9:15:ec:91:fd:1e:b3:9a:09:d4:9b:a5:8f:11:f8: 88:35:47:0b:2d:2a:5d:a2:bc:9b:db:55:29:e7:cf:0c:cd:5f: 11:b0:0c:28:16:16:b7:68:1e:45:2e:0b:90:f8:9f:6b:da:2d: e0:bb:72:5d:e3:dc:10:52:33:64:53:47:d8:99:41:8f:d8:b3: 95:04:ea:7c:1a:bf:e3:99:67:f6:0c:2f:67:af:d8:ea:06:7d: 7a:f1:7d:f6:1e:df:12:01:5b:9e:65:04:a6:d8:e7:25:1b:64: d9:ae:4f:f9:53:3a:cc:52:93:72:bc:97:c9:f3:53:c9:83:60: f2:ba:a8:32:3c:51:7f:63:43:7c:e5:2f:e8:71:d6:2a:ae:bd: 19:d7:68:d1:8c:8f:bf:a0:90:cb:3a:ee:96:48:de:60:44:01: e5:d0:a2:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2htapKGvdy6++gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YzExZWNjZWQtMWYzMS00YmViLTg4YzEtZmNiNDVmN2E3M2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ7PN5Y/FCFvwsWgPJJJD8TacK7vR9YmF/QR DX1YWQBendEaxbbdwnjxwKDH+PoGwF33ryQlXBHKJFWSJrKGefZPPEoxGzI6+zbr wg9gGStrgZVE6KOmUwsH4qR7mgdaOjp2oUAma7J55o/P/Jp2U/6r0xZdepeBnVVB H8LBBVhGu9Yyo54Sp3BZdE5ItCxDZ73P9PIFy2lFiUf01FpRrhSgvae0PgK0M5U6 WEGql1T7LTJtVO7EflAESA5T5HbVsf1sfAWiptu/IWBOLU/1pPPtYcG46bDQKHcT ukHNY5bw77budXsebtr/TmU9QU7W20SWEp04cVsSXN4l02U09QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeK//tCqikvThMSTqQCaWPuNjf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGEwYzMzYTYtMjllNy0z ZGQ0LWFiMjctYTI2YzIwNzUyYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9QAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIT8X2ginj/vTDXW4IvtEqjd1JLxwuD0rp5JOYdYwJUsECks/rrRe9t s0NiH67rpNde0ARZPNbB4clJLkpjG1zRYEmgN+KGcgm2WMCDRQ7ANm3UDeq8w/vk JzoxaOkV7JH9HrOaCdSbpY8R+Ig1RwstKl2ivJvbVSnnzwzNXxGwDCgWFrdoHkUu C5D4n2vaLeC7cl3j3BBSM2RTR9iZQY/Ys5UE6nwav+OZZ/YML2ev2OoGfXrxffYe 3xIBW55lBKbY5yUbZNmuT/lTOsxSk3K8l8nzU8mDYPK6qDI8UX9jQ3zlL+hx1iqu vRnXaNGMj7+gkMs67pZI3mBEAeXQot0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:49:11 2025 by rpki-client